We are happy to answer any questions you have about secure shopping with us. Click here to contact us.

WHAT IS OUR PRIVACY POLICY?

The Bluebella Privacy Promise to you: Security is our priority

When we are looking after your data, our focus is on cybersecurity. We know how important your information is to you, and we promise to collect, process, store and share your data safely and securely.

We respect your privacy and security as much as you do. When you shop with us, we will only ask for personal information such as your name, email address, billing address, product selections, credit card or other payment information in order to send out your goods in a timely manner.

We may also collect information about where you are on the Internet (such as the website you came from, IP address, domain types like .co.uk and .com), your browser type, the country where your internet service provider is located, the pages of our site that were viewed during your visit, and any search terms that you used.

We may also need to share your data with our trusted payment, fraud control and marketing partners. This will only ever be shared where necessary and always in a safe and secure way.

Once your order has been processed securely online, we do not keep any record of your credit card details.

PRIVACY AND PERSONAL DATA PROTECTION

In our everyday business operations we make use of a variety of data about visitors, including data about:

Customers

Users of our websites

Subscribers to our newsletters

Other stakeholders

In collecting and using this data, we are subject to a variety of new legislation controlling how such activities may be carried out and the safeguards that must be put in place to protect it.

The purpose of this policy is to set out the relevant legislation and to describe the steps we take to ensure that we comply with it.

This control applies to all systems, people and processes that constitute our information systems, including directors and employees who have access to our systems.

The following elements of the GDPR legislation are relevant to this Notice:

Data Protection Impact Assessment Process

Personal Data Mapping Procedure

Legitimate Interest Assessment Procedure

GDPR Roles and Responsibilities

Records Retention and Protection Policy

To find out more about the details of how we protect, process, use and share your data, click to read the sections below:

DATA PROTECTION REGULATION

The General Data Protection Regulation 2016 (GDPR) is one of the new pieces of legislation affecting the way that we carry out our information processing activities. Significant fines are applicable if a breach is deemed to have occurred under the GDPR, which is designed to protect the personal data of citizens of the European Union. It is our policy to ensure that our compliance with the GDPR and other relevant legislation is clear and demonstrable at all times.

The data subject – i.e. you - also has rights under the GDPR. These consist of:

Your right to be informed

Your right of access

Your right to rectification

Your right to erasure

Your right to restrict processing

Your right to data portability

Your right to object

Your rights in relation to automated decision making and profiling.

Each of these rights are supported by appropriate procedures within Bluebella that allow the required action to be taken within the timescales stated in the GDPR.

These timescales are as follows:

Your request

Timescale for our response

The right to be informed

When data is collected (if supplied by you) or within one month (if not supplied by you)

The right of access

One month

The right to rectification

One month

The right to erasure

Without undue delay

The right to restrict processing

Without undue delay

The right to data portability

One month

The right to object

On receipt of objection

Rights in relation to automated decision making and profiling.

Not specified

LAWFULNESS OF PROCESSING

There are six alternative ways in which the lawfulness of a specific case of processing of personal data may be established under the GDPR. It is our policy to identify the appropriate basis for processing and to document it, in accordance with the Regulation. Three of the six options that apply to us are described briefly as follows:

Consent Unless it is necessary for a reason allowable in the GDPR, we will always obtain explicit consent from you to collect and process your data. Transparent information about our usage of your personal data will be provided to you at the time that consent is obtained and your rights with regard to your data explained, such as the right to withdraw consent. This information will be provided in an accessible form, written in clear language and free of charge.

Performance of a Contract Where the personal data collected and processed are required to fulfil a contract with you, explicit consent is not required. This will often be the case where the contract cannot be completed without the personal data in question e.g. we can't deliver to you without an address to deliver to.

Legitimate Interests If the processing of specific personal data is in the legitimate interests of Bluebella and is judged not to affect the rights and freedoms of the data subject in a significant way, then this may be defined as the lawful reason for the processing. The reasoning behind this view will be documented.

SHARING YOUR INFORMATION

We do not, and will not, sell any of your personal data to any third party – including your name, address, email address or credit card information. We want to earn and maintain your trust, and we believe this is absolutely essential in order do that.

However, we do share your data with the following categories of companies as an essential part of being able to provide our services to you, as set out in this statement:

Companies that do things to get your purchases to you, such as ecommerce providers like Shopify, payment service providers like Amazon Pay, warehouses, order packers, and delivery companies

Professional service providers, such as marketing agencies, advertising partners and website hosts, who help us run our business

Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud

Companies approved by you, such as social media sites (if you choose to link your accounts to us), marketplaces where you can place your order like La Redoute, and Apple Pay or Amazon Pay where you choose to use their payment service

We may provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you.

SEEING ADVERTS FOR BLUEBELLA ONLINE

We engage in online advertising, both to keep you aware of what we’re up to and to help you see and find our products.

Like many companies, we target Bluebella banners and ads to you when you are on other websites and apps. We do this using a variety of digital marketing networks and ad exchanges, and we use a range of advertising technologies like web beacons, pixels, ad tags, cookies, and mobile identifiers, as well as specific services offered by some sites and social networks, such as Facebook’s Custom Audience service.

The banners and ads you see will be based on information we hold about you, or your previous use of Bluebella (for example, your Bluebella search history, and the content you read on Bluebella) or on Bluebella banners or ads you have previously clicked on.

Once you do this, we will update your profile to ensure that you don’t receive further marketing messages.

Please note that, as it might take a up to 3 working days for all our systems to be updated, so you might get messages from us while we process your request.

Stopping marketing messages will not stop service communications (such as order updates and product restock notifications) or where you have expressed interest in a specific activity at Bluebella, such as the launch of new collections.

How to stop marketing messages from Marketplaces

Every Marketplace (such as La Redoute) has a separate system to ours for recording marketing preferences. We are unable to amend your preferences or unsubscribe you from their messages.

If you decide you no longer want Marketplace marketing communications, you can opt out by visiting their site and updating your preferences there, or you can click on the ‘unsubscribe’ link in any email from that Marketplace.

For the La Redoute website, you can update your preferences via the "Mes préférés" link on www.laredoute.fr

KEEPING YOUR INFORMATION

We’ll hold on to your information for as long as you have your account, or as long as is needed to be able to provide the services to you, or (in the case of any contact you may have with our Customer Care team) for as long as is necessary to provide support-related reporting and trend analysis only.

If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also keep hold of some of your information as required, even after you have closed your account or it is no longer needed to provide the services to you.

CHANGES TO HOW WE PROTECT YOUR PRIVACY

We may change this page from time to time, to reflect how we are processing your data.

If we make significant changes, we will make that clear on the Bluebella website, or by some other means of contact such as email, so that you are able to review the changes before you continue to use Bluebella.

WHAT ABOUT COOKIES?

We use cookies when you visit our site. There are four main types of cookies – here’s how and why we use them.

Site functionality cookies – these cookies allow you to navigate the site and use our features, such as “Add to Bag” and “Save for Later”.

Site analytics cookies – these cookies allow us to measure and analyse how our customers use the site, to improve both its functionality and your shopping experience.

Customer preference cookies – when you are browsing or shopping on Bluebella, these cookies will remember your preferences (like your language or location), so we can make your shopping experience as seamless as possible, and more personal to you.

Targeting or advertising cookies – these cookies are used to deliver ads relevant to you. They also limit the number of times that you see an ad and help us measure the effectiveness of our marketing campaigns.

By using our site, you agree to us placing these sorts of cookies on your device and accessing them when you visit the site in the future. If you want to delete any cookies that are already on your computer, the “help” section in your browser should provide instructions on how to locate the file or directory that stores cookies. Further information about cookies can be found here.

Please note that by deleting or disabling future cookies, your user experience may be affected and you might not be able to take advantage of certain functions of our site, and the complete Bluebella user experience that we pride ourselves on providing our customers.

ADDRESSING COMPLIANCE

If you choose to receive e-mail marketing from Bluebella, we can tell you about new collections and offers. Remember you are in control and you can manage your preferences at any time.

If you would like to stop receiving marketing e-mails from us, you can unsubscribe or change your preference at any time by clicking "unsubscribe from this list" or "update subscription preferences" in the footer of any marketing email you receive from us, or by e-mailing us at care@bluebella.com with the header ‘Unsubscribe’

If you believe that any information we have about you is incorrect or incomplete, please e-mail us at care@bluebella.com. We will promptly correct any information found to be incorrect.

You have the right to access information held about you. Your right of access can be exercised in accordance with the Data Protection Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.

We may change this policy on occasion by updating this page. Please check this page from time to time to ensure that you are happy with any changes.

Our commitment to you: No personal data is ever sold to third parties.